This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.mft File: 69D341364BC344B4ED6B3A65031AACB403AB3222.mft (raw, json) Hash identifier: BAxKGXesu3r11KQiuS6ohFq1Ho+zMvqPM+XdcjM9NJc= Subject key identifier: 55:6C:4E:00:51:90:BC:70:74:3F:5C:68:E7:C0:E3:04:07:6E:74:DA Authority key identifier: 69:D3:41:36:4B:C3:44:B4:ED:6B:3A:65:03:1A:AC:B4:03:AB:32:22 Certificate issuer: /CN=69D341364BC344B4ED6B3A65031AACB403AB3222 Certificate serial: 70971F90FBD0ECD075AE4132FDA184B785C272C4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69D341364BC344B4ED6B3A65031AACB403AB3222.cer Subject info access: rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.mft Manifest number: 052F Signing time: Sat 06 Dec 2025 05:41:25 +0000 Manifest this update: Sat 06 Dec 2025 05:36:25 +0000 Manifest next update: Tue 09 Dec 2025 16:56:25 +0000 Files and hashes: 1: 323430323a326134303a3a2f33322d3438203d3e20313336383733.roa (hash: /62nOK71rLN/rA80+Xk3S/HgS8HMB1l9OOKuRpOZFP0=) 2: 69D341364BC344B4ED6B3A65031AACB403AB3222.crl (hash: QMwUzWZ6YUhcIqaccjJGaXHRRHpwwdq04Jx6Hc0Q3TU=) 3: 3130332e3130352e35322e302f32322d3234203d3e20313336383733.roa (hash: mEwVbYgiqYJGIGp+5J9MnWrl5gm8ToUUdLv1IaAGjLQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.crl rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69D341364BC344B4ED6B3A65031AACB403AB3222.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:97:1f:90:fb:d0:ec:d0:75:ae:41:32:fd:a1:84:b7:85:c2:72:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69D341364BC344B4ED6B3A65031AACB403AB3222 Validity Not Before: Dec 6 05:36:25 2025 GMT Not After : Dec 9 16:56:25 2025 GMT Subject: CN=556C4E005190BC70743F5C68E7C0E304076E74DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:50:58:4d:52:2f:67:39:e8:0f:fe:2f:a0:b9: 83:76:69:72:46:5f:7f:96:92:0d:41:f7:57:9d:34: 43:d2:94:61:8b:7d:59:ac:11:02:d2:33:b3:17:a3: 6b:f0:5c:94:ed:84:68:d4:7e:68:94:c2:07:60:a0: 46:b1:79:e6:43:8b:7a:03:10:5b:17:2a:e7:85:c9: 41:32:8a:46:46:8d:f6:92:af:9d:19:f1:79:09:a0: f2:a1:0e:73:ea:e0:e5:77:72:50:b6:06:0e:7f:6b: 7f:0f:21:3e:08:36:34:6d:0c:fc:1a:eb:41:4a:11: 85:9f:2f:87:9f:de:d4:be:00:71:48:79:0c:25:be: f5:b9:14:e2:68:87:69:11:0d:60:c7:90:33:dd:23: 31:1c:e0:54:95:3f:93:32:56:e1:fd:7f:5b:b4:58: b8:dd:c3:b3:7f:a6:04:22:7c:b6:dc:b8:50:f1:af: f0:d3:af:b7:5d:1b:8b:94:e1:55:e6:25:5c:a9:4f: 20:c7:c4:5e:57:0b:89:bf:94:4d:e7:e1:e8:c7:0f: da:b8:1d:82:7a:5b:c2:15:07:af:56:53:2f:c0:08: 29:61:2e:f4:3f:1f:a6:27:2a:a0:ca:5a:62:0e:17: 68:cd:a7:1f:f5:2e:96:fe:ca:81:d9:91:20:34:c6: c2:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:6C:4E:00:51:90:BC:70:74:3F:5C:68:E7:C0:E3:04:07:6E:74:DA X509v3 Authority Key Identifier: keyid:69:D3:41:36:4B:C3:44:B4:ED:6B:3A:65:03:1A:AC:B4:03:AB:32:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69D341364BC344B4ED6B3A65031AACB403AB3222.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:ab:bf:49:94:06:e4:c4:28:25:e3:7a:c3:2d:b2:34:a3:30: 1c:96:4f:45:1f:0e:e3:6a:a6:f6:82:d0:1e:dc:e5:bc:53:4b: 7f:5a:99:c0:d5:d6:e3:57:a1:20:3e:13:a9:68:65:d4:ec:f3: a7:1e:3b:3c:9b:f9:ff:77:4d:da:5b:16:aa:ef:60:ab:88:f1: 23:60:ab:d1:37:93:03:54:c7:e0:54:b6:22:30:cb:a2:51:2a: 4e:73:d0:17:d3:3a:04:38:c6:28:58:e0:ca:ab:2b:aa:e6:8b: b7:13:f3:6f:a0:51:e9:9a:1c:ea:e3:eb:f8:15:07:3a:c0:be: 07:fc:75:e5:56:07:3f:ee:9f:38:fd:8b:91:e7:82:d2:a2:e6: 94:b0:cf:2b:19:4e:aa:40:e6:68:9b:8f:71:6b:4a:87:16:bb: a3:5c:29:88:ad:7d:31:36:a7:5b:ce:39:cb:18:ba:b6:05:da: 3a:36:d6:1b:0e:ce:7d:0b:f8:83:3d:bd:86:15:f5:b9:75:a8: c5:e6:4c:33:55:95:d8:47:eb:1b:0a:17:f7:ba:07:57:59:28: 93:18:87:e5:a9:12:01:13:66:fa:a2:4d:da:85:71:d7:60:06: 2c:c8:f6:cb:ca:fe:16:1e:39:88:23:65:d0:f4:0c:d2:55:8c: 26:c8:e5:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcJcfkPvQ7NB1rkEy/aGEt4XCcsQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjlEMzQxMzY0QkMzNDRCNEVENkIzQTY1MDMxQUFDQjQw M0FCMzIyMjAeFw0yNTEyMDYwNTM2MjVaFw0yNTEyMDkxNjU2MjVaMDMxMTAvBgNV BAMTKDU1NkM0RTAwNTE5MEJDNzA3NDNGNUM2OEU3QzBFMzA0MDc2RTc0REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZUFhNUi9nOegP/i+guYN2aXJG X3+Wkg1B91edNEPSlGGLfVmsEQLSM7MXo2vwXJTthGjUfmiUwgdgoEaxeeZDi3oD EFsXKueFyUEyikZGjfaSr50Z8XkJoPKhDnPq4OV3clC2Bg5/a38PIT4INjRtDPwa 60FKEYWfL4ef3tS+AHFIeQwlvvW5FOJoh2kRDWDHkDPdIzEc4FSVP5MyVuH9f1u0 WLjdw7N/pgQifLbcuFDxr/DTr7ddG4uU4VXmJVypTyDHxF5XC4m/lE3n4ejHD9q4 HYJ6W8IVB69WUy/ACClhLvQ/H6YnKqDKWmIOF2jNpx/1Lpb+yoHZkSA0xsLzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVWxOAFGQvHB0P1xo58DjBAdudNowHwYDVR0j BBgwFoAUadNBNkvDRLTtazplAxqstAOrMiIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NTdhNmJjYi05ZWI2LTQ5ZGUtYjk5OC0wYmVkM2M1YzEyNzgvMC82OUQzNDEzNjRC QzM0NEI0RUQ2QjNBNjUwMzFBQUNCNDAzQUIzMjIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjlEMzQxMzY0QkMzNDRCNEVENkIzQTY1MDMxQUFDQjQwM0FC MzIyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjU3YTZiY2ItOWViNi00OWRlLWI5 OTgtMGJlZDNjNWMxMjc4LzAvNjlEMzQxMzY0QkMzNDRCNEVENkIzQTY1MDMxQUFD QjQwM0FCMzIyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABGrv0mUBuTEKCXjesMtsjSjMByWT0UfDuNq pvaC0B7c5bxTS39amcDV1uNXoSA+E6loZdTs86ceOzyb+f93TdpbFqrvYKuI8SNg q9E3kwNUx+BUtiIwy6JRKk5z0BfTOgQ4xihY4MqrK6rmi7cT82+gUemaHOrj6/gV BzrAvgf8deVWBz/unzj9i5HngtKi5pSwzysZTqpA5mibj3FrSocWu6NcKYitfTE2 p1vOOcsYurYF2jo21hsOzn0L+IM9vYYV9bl1qMXmTDNVldhH6xsKF/e6B1dZKJMY h+WpEgETZvqiTdqFcddgBizI9svK/hYeOYgjZdD0DNJVjCbI5d4= -----END CERTIFICATE-----Generated at Sun Dec 7 00:53:40 2025 by rpki-client